setup-matt-pocock-skills

setup-matt-pocock-skills is a skill for Claude Code, Codex from devcxl/mattpocock-skills-zh. It costs 43 tokens per session (1,852 once invoked), scanned A, original, MIT.

A setup skill that configures engineering skills for a repository, including its issue tracker, labels, and documentation layout. A repository is the project folder managed by version control.

In plain words
What is it for?
Use it when preparing a repository for engineering workflows, especially when deciding between GitHub Issues and local notes, or when checking whether the project is a monorepo—a repository containing multiple packages.
Why use it?
It prevents other engineering skills from guessing where issues, project context, and architecture decisions belong.

Skill for Claude CodeCodex

Written for Claude Code and Codex: disable-model-invocation in frontmatter, but also agents/openai.yaml present. Also seen: mentions CLAUDE.md; mentions AGENTS.md.

Part of the mattpocock-skills plugin — 37 skills shipped together

Good fit Use it when preparing a repository for engineering workflows, especially when deciding between GitHub Issues and local notes, or when checking whether the project is a monorepo—a repository containing multiple packages.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/devcxl/mattpocock-skills-zh/setup-matt-pocock-skills
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add devcxl/mattpocock-skills-zh --skill setup-matt-pocock-skills
Clone the repo
git clone --depth 1 https://github.com/devcxl/mattpocock-skills-zh

Made for: Claude Code, Codex.

Or install mattpocock-skills, the plugin that ships this one along with the rest of its 37 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for setup-matt-pocock-skills

README.md
[![agentmods](https://agentmods.dev/badge/skills/devcxl/mattpocock-skills-zh/setup-matt-pocock-skills/github.svg)](https://agentmods.dev/skills/devcxl/mattpocock-skills-zh/setup-matt-pocock-skills)
Your own site
<a href="https://agentmods.dev/skills/devcxl/mattpocock-skills-zh/setup-matt-pocock-skills"><img src="https://agentmods.dev/badge/skills/devcxl/mattpocock-skills-zh/setup-matt-pocock-skills/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for setup-matt-pocock-skills

Your own site · 80×15
<a href="https://agentmods.dev/skills/devcxl/mattpocock-skills-zh/setup-matt-pocock-skills"><img src="https://agentmods.dev/badge/skills/devcxl/mattpocock-skills-zh/setup-matt-pocock-skills.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 43 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,852 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00043 $0.01852
Opus 5 $0.00022 $0.00926
Sonnet 5 $0.00009 $0.00370
Haiku 4.5 $0.00004 $0.00185

Measured 12d ago against content hash 0a56bd86f9ea, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-11, from the pricing page.

Security

Grade A, and why

setup-matt-pocock-skills scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/engineering/setup-matt-pocock-skills/SKILL.md · 117 lines

How it starts

The opening of the file, as written. The whole thing — 117 lines — stays where its author put it; the contents beside it link to each section on GitHub.

设置 Matt Pocock 技能

搭建工程技能所依赖的逐仓库配置:

  • Issue 跟踪器 — issue 放在哪里(默认 GitHub;本地 markdown 也开箱即用)
  • 分类标签 — 五个规范分类角色所用的标签字符串
  • 领域文档CONTEXT.md 和 ADR 放在哪里,以及读取它们的消费规则

这是一个提示驱动的技能,不是确定性的脚本。探索、呈现你的发现、与用户确认,然后写入。

流程

1. 探索

查看当前仓库,了解它的起始状态。读一切存在的东西;不要假设:

  • git remote -v.git/config — 这是 GitHub 仓库吗?是哪一个?
  • 仓库根目录的 AGENTS.mdCLAUDE.md — 存在吗?里面是否已有 ## Agent skills 章节?
  • 仓库根目录的 CONTEXT.mdCONTEXT-MAP.md
  • docs/adr/ 和任何 src/*/docs/adr/ 目录
  • docs/agents/ — 这个技能之前的产出是否已存在?
  • .scratch/ — 表明本地 markdown issue 跟踪器约定已在使用的迹象
  • triage 技能是否已安装?(与这个技能文件夹并列的 triage 技能文件夹,或你的可用技能中有 triage。)这决定 B 节是否执行。
  • Monorepo 信号 — 有 pnpm-workspace.yamlpackage.json 里有 workspaces 字段,或有带自己的 src/packages/*。只在真正大的多包仓库里出现;没有它们就是单上下文,而几乎所有仓库都是单上下文。

2. 呈现发现并询问

总结哪些存在、哪些缺失。然后按顺序过各节——一节、一个回答,然后下一节。

每节先用推荐答案开头,让用户一个字就能接受。只有在选择确实分叉时才给一行解释;当探索已经解决了该节时就整节跳过(没装 triage 时跳过 B 节,没有 monorepo 时跳过 C 节)。

A 节 — Issue 跟踪器。

解释:这个仓库的 "issue tracker" 就是 issue 存放的地方。to-ticketstriageto-spec 等技能会读写它——它们需要知道该调用 gh issue create、在 .scratch/ 下写 markdown 文件,还是遵循你描述的其他工作流。选一个你实际为本仓库跟踪工作的位置。

默认姿态:这些技能是为 GitHub 设计的。如果 git remote 指向 GitHub,就提议 GitHub。如果 git remote 指向 GitLab(gitlab.com 或自托管主机),就提议 GitLab。否则(或用户偏好),提供:

  • GitHub — issue 存在仓库的 GitHub Issues 里(使用 gh CLI)
  • GitLab — issue 存在仓库的 GitLab Issues 里(使用 glab CLI)
  • 本地 markdown — issue 作为 .scratch/<feature>/ 下的文件存在本仓库中(适合单人项目或没有 remote 的仓库)
  • 其他(Jira、Linear 等)— 让用户用一段话描述工作流;技能会把它记录为自由文本

把选择记录在 docs/agents/issue-tracker.md。GitHub 和 GitLab 模板带有"PRs as a request surface"(把 PR 当作请求入口)标志,默认关闭——保持关闭,不要提起它;想把外部 PR 放进分类队列的用户可以稍后在文件里打开这个标志。

B 节 — 分类标签词汇。 如果 triage 技能未安装(探索已告诉你),整节跳过——未安装的技能不需要标签。

如果已安装,只问一个问题:

你想保留默认的分类标签吗?(推荐:

默认值就是五个规范角色,每个标签字符串等于其角色名:needs-triageneeds-infoready-for-agentready-for-humanwontfix。选,就原样写入。只有当用户说不——通常是因为他们的跟踪器已经用了别的名字(比如用 bug:triage 表示 needs-triage)——才收集覆盖项,这样 triage 会应用已有标签而不是创建重复的。

Read the full file on GitHub · 117 lines

Files

What ships with it

6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 12d ago First seen · 117 lines · 43 tokens per session scan A 0a56bd86f9ea

Subscribe to this mod's changes

setup-matt-pocock-skills is a skill published in the GitHub repository devcxl/mattpocock-skills-zh (343 stars, last pushed 7d ago), licensed MIT. It adds 43 tokens to every session and 1,852 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.